Threats tagged 'ghsa-xhhw-j3h4-3x9r'

A vulnerability in Firefox for macOS involves modification of specific WebGL shader attributes that can trigger an out-of-bounds read. This flaw, identified as CVE-2025-4082, could be chained with other vulnerabilities to escalate privileges. It affects Firefox versions prior to 138 and Firefox ESR versions prior to 128.10, as well as Thunderbird versions prior to 138 and Thunderbird ESR versions prior to 128.10. Other Firefox versions on different platforms are not affected. The vulnerability has a medium CVSS score of 5.9 and is classified as a memory corruption issue (CWE-125).